Subprocessors
Last updated 18 October 2026
These providers process personal data for us so that PaperworkPilot works. Each handles it under its own data processing or privacy terms.
Who they are
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage (your workspace, documents and PDFs) | United States (N. Virginia, us-east-1) |
| Vercel | Hosts the website and runs the app’s server code | United States; pages are delivered through its global network |
| Resend | Sends the sign-in emails | United States |
| Cloudflare | Our domain’s DNS; forwards emails sent to our support address | Global network |
| Google (Gmail) | The support mailbox | United States and other countries |
Others who receive data, but not for us
- Paddle is our Merchant of Record. It sells plans and credits to you and uses your payment details under its own privacy notice.
- The European Commission (VIES) and HM Revenue & Customs (HMRC) receive a client’s VAT number, and nothing else, only when you press Check on that client.
Changes
We will update this page at least 14 days before a new subprocessor starts processing your clients’ personal data, and tell workspace owners by email. If you object, email us at support@yourpaperworkpilot.com; if we can’t resolve it, you can close your account and ask for a refund of any prepaid period you haven’t used.
See also our privacy notice and data processing terms.